Profit

Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Profit concepts, best practices, and implementation patterns.

Security Scan

The skill is internally consistent with its description: a local reference tool that prints static documentation snippets and requests no credentials or network access.

Purpose & Capability

The name/description (reference docs for Profit/devtools) align with the included files: SKILL.md describes plain-text commands and scripts/script.sh implements those commands. There are no extra binaries, env vars, or unrelated requirements. Minor inconsistency: repository metadata/version is 2.0.1 while the script's VERSION is 2.0.0 and the help heredoc is single-quoted (so $VERSION will not expand) — this is a benign housekeeping mismatch.

Instruction Scope

SKILL.md instructs producing heredoc text only; the runtime script only outputs static documentation via heredocs and uses no network, file reads, or secret access. The script does not collect or transmit user data or reference system credentials.

Install Mechanism

There is no install spec (instruction-only skill). One shell script is bundled; it is not downloaded from an external URL nor does it perform installs. No archives are extracted and nothing writes to unexpected system locations.

Credentials

The skill declares no required environment variables, no credentials, and the implementation does not read environment variables or config paths. Requested privileges are minimal and proportionate to a local reference tool.

Persistence & Privilege

always is false and the skill does not request persistent/system-wide configuration or modify other skills. Autonomous invocation is permitted (platform default) but the skill's scope is limited to printing docs.

Assessment

This skill appears safe and does what it says: prints static reference text. If you want extra caution, review scripts/script.sh locally (already provided) and run it in a sandbox or container before allowing autonomous agent invocation. Note the small version string mismatch in the script (2.0.0) vs registry (2.0.1) — harmless but worth fixing. If you require strict assurance, ensure the agent cannot run arbitrary shell commands outside this skill or enable the skill only for trusted agents.

Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Profit concepts, best practices, and implementation patterns. No API keys or credentials required.

Commands

Command	Description
intro	intro reference
quickstart	quickstart reference
patterns	patterns reference
debugging	debugging reference
performance	performance reference
security	security reference
migration	migration reference
cheatsheet	cheatsheet reference

Output Format

All commands output plain-text reference documentation via heredoc. No external API calls, no credentials needed, no network access.

---

Powered by BytesAgain | bytesagain.com | [e-mail]